Bug in Grammarly browser extension exposes virtually everything a user ever writes
The Grammarly browser extension, which has about 22 million users, exposes its authentication tokens to all websites, allowing any to access all the user’s data without permission, according to a bug report from Google Project Zero’s Tavis Ormandy. The high-severity bug was discovered on Friday and fixed early Monday morning, “a really impressive response time,” Read more about Bug in Grammarly browser extension exposes virtually everything a user ever writes[…]